CVE Catalog
CVE-2017-15081
CriticalSummary
In PHPSUGAR PHP Melody CMS version 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to update to the latest version of PHP Melody CMS and implement input filtering and validation.
Original NVD description (English source)
In PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.